Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-138 (对特殊元素的转义处理不恰当) — Vulnerability Class 11

11 vulnerabilities classified as CWE-138 (对特殊元素的转义处理不恰当). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-32178 .NET Spoofing Vulnerability — .NET 10.0 7.5 High2026-04-14
CVE-2026-20009 Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 5.3 Medium2026-03-04
CVE-2025-48939 tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript — tarteaucitron.js 4.2 Medium2025-07-03
CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element — esapi-java-legacy 7.3 High2025-06-29
CVE-2024-51500 Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware — firmware 5.3 Medium2024-11-04
CVE-2024-38133 Windows Kernel Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.8 High2024-08-13
CVE-2023-42117 Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability — Exim 9.8 -2024-05-03
CVE-2023-22288 Email HTML Injection — Checkmk 6.8 Medium2023-03-20
CVE-2022-2429 Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection — Ultimate SMS Notifications for WooCommerce 6.5 Medium2022-09-06
CVE-2022-0024 PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit — PAN-OS 7.2 High2022-05-11
CVE-2016-0750 Infinispan hotrod java客户端安全漏洞 — Infinispan 8.8 -2018-09-11

Vulnerabilities classified as CWE-138 (对特殊元素的转义处理不恰当) represent 11 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.